There has been introduced a new attribute for Elytron server-ssl-context - 'wrap', which is required to be set to false when using such SslContext with Undertow https-listener and utilizing HTTP/2. Currently default value of that attribute is 'true' but since EAP7.1.0.DR15 the default should change to 'false'.

Even though the default value of the 'wrap' attribute will be ok, I think that we should still provide information (maybe with brief explanation?) right in the description of "ssl-socket" attribute in "https-listener" that it requires 'writable' form of SslContext provided by Elytron subsystem now. It will be more visible to customer and might avoid some misunderstandings I think.